diff --git a/.gitignore b/.gitignore
index 5eae1c2..70eac6f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,6 @@
 /container-selinux-b9809fa.tar.gz
 /container-selinux-ba28054.tar.gz
 /container-selinux-9e004af.tar.gz
+/container-selinux-ce95ddb.tar.gz
+/container-selinux-f7333f9.tar.gz
+/container-selinux-08bb6e0.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 731507d..01bb974 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora}
-%global commit0 9e004afd7efa3e7357cc15783062452f63557df7
+%global commit0 08bb6e0a1a63b1312c88c2e201b58aeb0ffd5467
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos}
 Epoch: 2
 %endif
-Version: 2.6
+Version: 2.9
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -118,6 +118,15 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Mon Feb 13 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2:9.1-1
+- Add rules to allow container_runtimes to run with unconfined disabled
+
+* Thu Feb 9 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2:8.1-1
+- Allow container_file_t to be stored on cgroup_t file systems
+
+* Tue Feb 7 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2:7.1-1
+- Fix type in container interface file
+
 * Mon Feb 6 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2:6.1-1
 - Fix typebounds entrypoint problems
 
diff --git a/sources b/sources
index 720c023..983bbdb 100644
--- a/sources
+++ b/sources
@@ -1,5 +1 @@
-SHA512 (container-selinux-bcdcb9a.tar.gz) = 382ed177ac878e56a7a4819b30362f0f797657ae4b87847e624124d06e4f56463a44c8a4d0ba60ebe02bf53128b43ec5d0ce5a6f9e0d6450594a9cef60531806
-SHA512 (container-selinux-3bbbad5.tar.gz) = d255c5993bff90fb90030d6d0ced11eeed9a620878e24b99fdba7e8c66e130fcc88ac6f839fd84a96863f3d0fb57a41d4d4a59e30eb383ad999a75d22d8533a2
-SHA512 (container-selinux-b9809fa.tar.gz) = 796403b5951daaaf1de932d02d42be9a62ba877fcf67f5cbd9e489427e886cb9dcb990810d46a0359dabfe5ce132139c869c278d4a17b3690530e7cfd0f0575b
-SHA512 (container-selinux-ba28054.tar.gz) = 3d71410947122b69e1b291dbf64071a8cbde386e8b9d1ea534cb5b822e293b0123b869fc212b8ab2ef7a976fdc93ab468c489b6aabb40f477530fd9ec830d6b4
-SHA512 (container-selinux-9e004af.tar.gz) = 04827c282a378ac1c3460f02dd3b757b3936422b659d4c0f6391864fda88a6bae1e773fd194b6f6b78918d4f6336a2623682f71a3899014cd97903018ed7d715
+SHA512 (container-selinux-08bb6e0.tar.gz) = bba16bd77c6d34982637e4fc874ef1a741df7ca73a85ad1edfece5ae2838409efbe00ea44653acb63c22c6939c7afc72f7882715c9c4657d4427eff6f77d2a35